Package Health/mwstake/mediawiki-component-dynamicconfig

mwstake/mediawiki-component-dynamicconfig

This is a generally healthy, actively published package with a stable 2.1.2 release, a clear GPL-3.0-only license, documented usage, tests, a coherent 32-file source tree, no registry deprecation, and a non-archived repository with an organizational owner. The main concerns are that only two commits from one contributor were observed in the last 3 months, the repository has very limited popularity and no recent issue or pull-request throughput, and the workflow lacks explicit top-level token permissions; the absence of a security policy and changelog also reduces transparency. These concerns warrant caution but do not outweigh the recent release, repository activity, tests, and organization backing.

Latest 2.1.2

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

All two recent commits came from one contributor, giving a 100% top-contributor share; this is a genuine continuity concern, though organizational ownership provides some capacity to hand maintenance off.

Repo commit activity

Two commits were recorded in the last 3 months, showing some ongoing activity but a low maintenance pace for the period.

Repo issue activity

There is one open issue and one open pull request, but no issues or pull requests were created or closed in the last month, indicating limited observable community or maintenance throughput.

Repo popularity

The repository has only 2 stars, 0 forks, and 2 watchers. This is weak supporting evidence, but popularity alone is not a decisive health measure for a small specialized component.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency and assurance gap, not evidence that the package is unsafe by itself.